From b5fe72853fbd98fe4f2f72a3aface4594a2a24ed Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Tue, 8 Oct 2024 12:45:32 +0000
Subject: [PATCH] Publish GHSA-g4rf-pc26-6hmr

---
 .../GHSA-g4rf-pc26-6hmr.json                  | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2021/03/GHSA-g4rf-pc26-6hmr/GHSA-g4rf-pc26-6hmr.json b/advisories/github-reviewed/2021/03/GHSA-g4rf-pc26-6hmr/GHSA-g4rf-pc26-6hmr.json
index 169d5c5c417..faaabf8ff35 100644
--- a/advisories/github-reviewed/2021/03/GHSA-g4rf-pc26-6hmr/GHSA-g4rf-pc26-6hmr.json
+++ b/advisories/github-reviewed/2021/03/GHSA-g4rf-pc26-6hmr/GHSA-g4rf-pc26-6hmr.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g4rf-pc26-6hmr",
-  "modified": "2021-03-29T17:37:02Z",
+  "modified": "2024-10-08T12:43:19Z",
   "published": "2021-03-23T15:26:49Z",
   "aliases": [
     "CVE-2021-21377"
@@ -9,7 +9,14 @@
   "summary": "OMERO webclient does not validate URL redirects on login or switching group.",
   "details": "### Background\nOMERO.web supports redirection to a given URL after performing login or switching the group context. These URLs are not validated, allowing redirection to untrusted sites. OMERO.web 5.9.0 adds URL validation before redirecting. External URLs are not considered valid, unless specified in the ``omero.web.redirect_allowed_hosts`` setting.\n\n### Impact\nOMERO.web before 5.9.0\n\n### Patches\n5.9.0\n\n### Workarounds\nNo workaround\n\n### References\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [omero-web](https://github.com/ome/omero-web)\n* Email us at [security](mailto:security@openmicroscopy.org.uk)",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
+    }
   ],
   "affected": [
     {
@@ -45,10 +52,18 @@
       "type": "WEB",
       "url": "https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/ome/omero-web"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/omero-web/PYSEC-2021-32.yaml"
+    },
     {
       "type": "WEB",
       "url": "https://pypi.org/project/omero-web"